$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft File: 597B422C63F4E901AB522655E1EDFD64C35BD133.mft (raw, json) Hash identifier: 3BlSVsxe1UarKRtydE/pOwOne26+r8AfbH3X2TEF5xw= Subject key identifier: B8:04:58:F2:5C:CB:42:E1:B4:B9:69:9B:01:09:36:4A:E8:CF:3E:51 Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Certificate serial: 3DFD86658C6EF9D5868B83A3AB50D9407DC072AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft Manifest number: 010F Signing time: Fri 22 Aug 2025 14:17:58 +0000 Manifest this update: Fri 22 Aug 2025 14:12:58 +0000 Manifest next update: Wed 27 Aug 2025 22:58:58 +0000 Files and hashes: 1: 3139302e38392e33302e302f32332d3234203d3e20323634363238.roa (hash: KhXKx5dvbEtfbuQNY+8EKd83f5T7zYmsARmgbPEql94=) 2: 3139302e382e3136342e302f32322d3234203d3e20323634363238.roa (hash: SC3Dk/QoQplZk7v3ipWS7g+w5zavuo+h83ht30/CUAs=) 3: 597B422C63F4E901AB522655E1EDFD64C35BD133.crl (hash: KC51y2dY4knZ2s4NVlRdDs6N90A0oOEhItUCcuiQIVI=) 4: 3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa (hash: Cd55MHsAKVIu4e0ymDmPye0lOO6ATQ8GPoT/nPjgKGQ=) 5: 323830333a633030303a3a2f33322d3438203d3e20323634363238.roa (hash: cEomYy0mhmbMcV4Ba3ZckWzEsFdtuQWq0XtZA61WqJA=) 6: 3139302e38392e32392e302f32342d3234203d3e20323634363238.roa (hash: QGu+sC4ZY/13AwhpK6x9pa6Sm8jmiUbyCdWRDJfG+oU=) 7: 3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa (hash: F1xVgce7EzEJjFLYDi93pcV3xy6rzj+QBl3lBXxELwY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fd:86:65:8c:6e:f9:d5:86:8b:83:a3:ab:50:d9:40:7d:c0:72:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Validity Not Before: Aug 22 14:12:58 2025 GMT Not After : Aug 27 22:58:58 2025 GMT Subject: CN=B80458F25CCB42E1B4B9699B0109364AE8CF3E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:33:ff:1b:64:4a:ff:97:32:32:ff:49:15: 81:d8:60:31:df:ca:fc:ca:e2:c4:a5:dc:51:30:c6: 3a:3d:b5:ce:dc:f0:76:4c:cd:1f:ba:45:e4:66:5d: ff:05:9c:09:b3:69:bc:99:f8:9f:6b:cc:bd:f0:49: 47:16:3a:5d:ff:da:77:8e:85:69:b6:1a:ad:d4:86: c9:4d:57:3b:97:5b:ba:8f:7e:b4:5c:83:00:b1:f9: c0:f1:86:6d:4f:c2:ac:47:1d:07:55:53:48:c3:10: 86:53:05:b6:16:59:89:93:e4:42:84:68:bd:74:a7: 6e:b3:c9:f5:47:e2:3a:b9:5e:2f:63:b5:db:ca:92: cf:44:98:05:15:07:e4:6b:bb:e1:12:dc:de:6c:3c: dc:7a:a0:c7:ea:34:84:65:bc:5f:1a:f1:ce:e5:f8: 0a:b0:61:63:f4:7d:f5:b8:67:5a:c0:ff:1d:33:de: e1:0b:dc:24:c4:16:ce:ef:cf:bd:62:56:26:5d:f1: 25:fc:d8:39:a4:38:23:ce:4f:50:e9:b8:1c:d4:b4: 8f:09:70:fc:e8:e8:3a:2c:c8:f8:b1:46:7b:48:7b: 49:ce:9e:0a:a9:f8:1b:f7:a7:2d:0a:09:09:eb:4c: 7d:99:11:5e:ab:c9:df:80:ac:0b:88:50:51:d5:c9: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:58:F2:5C:CB:42:E1:B4:B9:69:9B:01:09:36:4A:E8:CF:3E:51 X509v3 Authority Key Identifier: keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:31:08:a9:ff:38:c8:12:30:3f:9c:f6:b1:69:f9:65:d1:c6: 40:96:7e:8e:0a:91:70:b5:ba:e9:79:ba:fc:f5:3c:59:80:c6: 2b:93:d4:bc:fc:33:e2:eb:92:4a:cf:af:b9:e9:36:ca:f1:15: 60:79:e2:15:b2:43:ca:81:b1:d7:80:fe:0e:55:ec:f0:2b:98: 39:07:6e:b5:ae:af:d6:68:a8:ea:92:3e:83:b8:f5:fe:3a:76: f1:a4:09:bd:dc:b0:48:17:9f:b5:19:50:55:5c:b3:c8:f9:35: 1c:eb:2a:a7:3e:70:f0:c3:f2:ae:4e:21:72:06:48:04:be:31: 44:47:b1:60:a6:f3:09:27:00:25:49:61:a7:0e:56:c3:7b:34: e3:5e:d4:1f:ee:2e:f3:6e:86:ea:c3:45:bc:48:0c:8a:79:34: a9:75:3e:40:14:3a:c4:5a:e0:9c:2d:09:2f:51:58:0f:f8:e9: 36:da:2c:28:fe:0f:a0:bd:56:27:d2:08:9d:d0:e8:7b:0c:b0: 1f:18:32:43:06:5f:3c:6b:6f:19:75:a6:ad:1f:ac:23:72:6d: 4e:99:4d:6e:97:e5:57:78:7d:91:c5:e3:c8:74:0f:a0:51:b4: 5a:58:a9:e7:19:2d:a8:99:e6:60:56:8f:dd:ee:c2:e3:64:01: 85:94:7c:46 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPf2GZYxu+dWGi4Ojq1DZQH3Acq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD MzVCRDEzMzAeFw0yNTA4MjIxNDEyNThaFw0yNTA4MjcyMjU4NThaMDMxMTAvBgNV BAMTKEI4MDQ1OEYyNUNDQjQyRTFCNEI5Njk5QjAxMDkzNjRBRThDRjNFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUjP/G2RK/5cyMv9JFYHYYDHf yvzK4sSl3FEwxjo9tc7c8HZMzR+6ReRmXf8FnAmzabyZ+J9rzL3wSUcWOl3/2neO hWm2Gq3UhslNVzuXW7qPfrRcgwCx+cDxhm1PwqxHHQdVU0jDEIZTBbYWWYmT5EKE aL10p26zyfVH4jq5Xi9jtdvKks9EmAUVB+Rru+ES3N5sPNx6oMfqNIRlvF8a8c7l +AqwYWP0ffW4Z1rA/x0z3uEL3CTEFs7vz71iViZd8SX82DmkOCPOT1DpuBzUtI8J cPzo6DosyPixRntIe0nOngqp+Bv3py0KCQnrTH2ZEV6ryd+ArAuIUFHVydSfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuARY8lzLQuG0uWmbAQk2SujPPlEwHwYDVR0j BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1 MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzU5N0I0MjJDNjNGNEU5MDFBQjUyMjY1 NUUxRURGRDY0QzM1QkQxMzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1MQip/zjIEjA/nPaxafll0cZA ln6OCpFwtbrpebr89TxZgMYrk9S8/DPi65JKz6+56TbK8RVgeeIVskPKgbHXgP4O VezwK5g5B261rq/WaKjqkj6DuPX+OnbxpAm93LBIF5+1GVBVXLPI+TUc6yqnPnDw w/KuTiFyBkgEvjFER7FgpvMJJwAlSWGnDlbDezTjXtQf7i7zbobqw0W8SAyKeTSp dT5AFDrEWuCcLQkvUVgP+Ok22iwo/g+gvVYn0gid0Oh7DLAfGDJDBl88a28Zdaat H6wjcm1OmU1ul+VXeH2RxePIdA+gUbRaWKnnGS2omeZgVo/d7sLjZAGFlHxG -----END CERTIFICATE-----Generated at Sun Aug 24 00:58:30 2025 by rpki-client